colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

exiftool: fix sandboxing

Browse Source 
and with that, also fixes Megapixels open-image button :)
This commit is contained in:
Colin
2024-12-03 03:52:29 +00:00
parent 6340a35fb9
commit cb9aba095d
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/common/programs/exiftool.nix
View File

@@ -1,6 +1,9 @@
{ ... }:
{
sane.programs.exiftool = {
sandbox.autodetectCliPaths = "existingFile";
# exiftool modifies files by writing out a new file adjacent to it and then `mv`ing it over the original file.
# this requires it to have write access to the *parent* of whatever file it's operating on.
sandbox.autodetectCliPaths = "parent";
# sandbox.autodetectCliPaths = "existingFile";
};
}

2
hosts/common/programs/megapixels-next.nix
View File

@@ -43,7 +43,7 @@ in
sandbox.wrapperType = "inplace"; #< for share/megapixels/movie.sh
sandbox.whitelistDri = true;
sandbox.whitelistWayland = true;
sandbox.whitelistDbus = [ "user" ]; #< so that it can in theory open the image viewer using fdo portal... but it doesn't :|
sandbox.whitelistDbus = [ "user" ]; #< so that it can open the image viewer using fdo portal...
sandbox.extraHomePaths = [
# ".config/megapixels"
".cache/mesa_shader_cache" # loads way faster